# Use text install
text

%pre
#(ls -d /dev/md/* |xargs -n1 mdadm --stop) || true
#(ls -d /dev/sd? | xargs -n1 wipefs -af) || true
#partprobe || true
%end

%addon com_redhat_kdump --disable

%end

# Keyboard layouts
keyboard --xlayouts='se','us'
# System language
lang en_US.UTF-8

# Use network installation

url --url="http://repo1.uppmax.uu.se/repos/mirror/live/rocky/9.4/BaseOS/x86_64/os"
logging --host=gromit.uppmax.uu.se
eula --agreed

reboot --kexec

%packages
@^minimal-environment
tar
%end

# Run the Setup Agent on first boot
firstboot --disable


# Generated using Blivet version 3.6.0
ignoredisk --only-use=sda,sdb,sdc
# System bootloader configuration
bootloader --location=mbr --boot-drive=sda
# Clear the Master Boot Record
zerombr
clearpart --all --initlabel --drives=sda,sdb,sdc
part raid.11 --size=2048 --ondisk=sda --asprimary
part raid.21 --size=2048 --ondisk=sdb --asprimary
part raid.31 --size=2048 --ondisk=sdc --asprimary
part raid.12 --size=8192 --ondisk=sda --asprimary
part raid.22 --size=8192 --ondisk=sdb --asprimary
part raid.32 --size=8192 --ondisk=sdc --asprimary
part swap --size=2048 --ondisk=sda
part swap --size=2048 --ondisk=sdb
part swap --size=2048 --ondisk=sdc 
part raid.14 --size=1 --grow --ondisk=sda 
part raid.24 --size=1 --grow --ondisk=sdb 
part raid.34 --size=1 --grow --ondisk=sdc 

raid /boot 	 --fstype ext4 --level=1 --device=md0 raid.11 raid.21 raid.31
raid /		 --fstype ext4 --level=0 --device=md1 raid.12 raid.22 raid.32
#raid swap	 --fstype swap --level=0 --device=md2 raid.13 raid.23 raid.33
raid /scratch	 --fstype ext4 --level=0 --device=md3 raid.14 raid.24 raid.34

timesource --ntp-server=nat1.uppmax.uu.se
timesource --ntp-server=nat2.uppmax.uu.se
# System timezone
timezone Europe/Stockholm --utc

# Root password
rootpw --iscrypted $6$AlquGAvEfjmjtjzq$KD8rrNq9B7cruUIsBReWhGCPisPQH./rTC2hKNvR.zCn2TZkLl4r7Qd1/7qlGbNbi09qzqSqJ/rzQ7RSctADn.

%post

# Do this directly so no packages sneaks in from the outside
mkdir /etc/uppmax.repos.d
echo "reposdir=/etc/uppmax.repos.d" >> /etc/dnf/dnf.conf

#temp
echo "PermitRootLogin yes" > /etc/ssh/sshd_config.d/01-permitrootlogin.conf



# Some stuff just works better with a fully installed system -- nmcli for example
cat <<EOF > /etc/systemd/system/firstrun.service
[Unit]
Description=Initial setup
ConditionPathExists=!/etc/initial_setup_done

[Service]
Type=oneshot
ExecStart=/usr/local/sbin/firstrun.sh
# Should be nice with working network-online.target... but not worth it
# without network manager and half broken network...
#After=network-online.target
#Wants=network-online.target

[Install]
WantedBy=multi-user.target
EOF

cat <<EOF >/usr/local/sbin/firstrun.sh
#!/bin/bash

logger initial_puppet_ping

# Util network and resolver works (almost blabla-wait-online.service)
while true; do ping -c1 puppet &> /dev/null && break; done

logger initial_nmcli
# setup static network with nmcli (ip from the dhcp-connection)
ethinterface=\$(ip -4 -br a|grep -v ^lo|cut -d ' ' -f1)
ipaddress=\$(ip -4 -br a s \$ethinterface|tr -s ' '|cut -d ' ' -f3)
nmcli c m \$ethinterface ipv4.addresses \$ipaddress
nmcli c m \$ethinterface ipv4.gateway 172.18.8.1
nmcli c m \$ethinterface ipv4.dns "172.18.37.34 172.18.37.37"
nmcli c m \$ethinterface ipv4.dns-search uppmax.uu.se
nmcli c m \$ethinterface ipv4.dns-options "rotate timeout:1 attempts:5"
nmcli c m \$ethinterface ipv4.method manual
nmcli c m \$ethinterface ipv6.method disabled
nmcli con up \$ethinterface

lastpart=\$(echo \$ipaddress|cut -d '.' -f3-4|cut -d/ -f1)
ibinterface=\$(ip  -br l|grep ^ib|grep ' UP '|cut -d ' ' -f1)
nmcli c m \$ibinterface ipv4.addresses 10.0.\$lastpart/16
nmcli c m \$ibinterface ipv4.method manual
nmcli c m \$ibinterface autoconnect yes
nmcli c m \$ibinterface ipv6.method disabled

nmcli con up \$ibinterface


systemctl restart NetworkManager

hostnamectl set-hostname \$(hostnamectl --transient)

setenforce 0
sed -i 's/SELINUX=enforcing/SELINUX=disabled/' /etc/sysconfig/selinux


logger initial_puppet_install

rpm -Uvh http://repo1.uppmax.uu.se/repos/mirror/live/rsync.puppet.com/yum/puppet7/el/9/x86_64/puppet-agent-7.31.0-1.el9.x86_64.rpm

hostnamectl set-hostname \$(hostnamectl --transient)
/opt/puppetlabs/bin/puppet agent -tv  --ssldir  /var/lib/puppetlabs/puppet/ssl  --vardir  /var/lib/puppetlabs/puppet/cache --environment irhom
logger initial_puppet_done

update-crypto-policies --set DEFAULT:SHA1
systemctl disable firstrun.service 

dnf -y  --enablerepo=uppmax-live install emacs-nox nmap fping lldpd strace nfs-utils python3-psutil sssd-ldap

dnf -y update

authselect select --force sssd

touch /etc/initial_setup_done
logger initial_setup_done
reboot
EOF

chmod +x /usr/local/sbin/firstrun.sh
systemctl enable firstrun.service
%end